Palo Alto Networks Expedition Wildcard Expansion Vulnerability Allowing File Enumeration

A wildcard expansion vulnerability exists in Palo Alto Networks Expedition, prior to version 1.2.101. This vulnerability allows an unauthenticated attacker to enumerate files on the host filesystem. Expedition is a tool designed to facilitate migration to the Palo Alto Networks NGFW platform from other firewall vendors, but it has reached its End of Life and is no longer supported.

Impact

Exploitation of this vulnerability could lead to unauthorized file enumeration on the host filesystem, potentially exposing sensitive information.

Remediation

Users should update to Palo Alto Networks Expedition version 1.2.101 or later. However, since Expedition has reached its End of Life and is no longer supported, users are advised to discontinue use of the tool and consider the suggested alternatives listed in the Expedition End of Life Announcement.